Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
SUSE-SU-2026:21697-1 Vulnerability in SUSE-SU-2026:21697-1 (SUSE-SU-2026:21697-1)
vulnerability in SUSE-SU-2026:21697-1 (SUSE-SU-2026:21697-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21665-1 Vulnerability in SUSE-SU-2026:21665-1 (SUSE-SU-2026:21665-1)
vulnerability in SUSE-SU-2026:21665-1 (SUSE-SU-2026:21665-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21666-1 Vulnerability in SUSE-SU-2026:21666-1 (SUSE-SU-2026:21666-1)
vulnerability in SUSE-SU-2026:21666-1 (SUSE-SU-2026:21666-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21696-1 Vulnerability in SUSE-SU-2026:21696-1 (SUSE-SU-2026:21696-1)
vulnerability in SUSE-SU-2026:21696-1 (SUSE-SU-2026:21696-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21663-1 Vulnerability in SUSE-SU-2026:21663-1 (SUSE-SU-2026:21663-1)
vulnerability in SUSE-SU-2026:21663-1 (SUSE-SU-2026:21663-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21694-1 Vulnerability in SUSE-SU-2026:21694-1 (SUSE-SU-2026:21694-1)
vulnerability in SUSE-SU-2026:21694-1 (SUSE-SU-2026:21694-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21695-1 Vulnerability in SUSE-SU-2026:21695-1 (SUSE-SU-2026:21695-1)
vulnerability in SUSE-SU-2026:21695-1 (SUSE-SU-2026:21695-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21668-1 Vulnerability in SUSE-SU-2026:21668-1 (SUSE-SU-2026:21668-1)
vulnerability in SUSE-SU-2026:21668-1 (SUSE-SU-2026:21668-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21662-1 Vulnerability in SUSE-SU-2026:21662-1 (SUSE-SU-2026:21662-1)
vulnerability in SUSE-SU-2026:21662-1 (SUSE-SU-2026:21662-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21693-1 Vulnerability in SUSE-SU-2026:21693-1 (SUSE-SU-2026:21693-1)
vulnerability in SUSE-SU-2026:21693-1 (SUSE-SU-2026:21693-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21664-1 Vulnerability in SUSE-SU-2026:21664-1 (SUSE-SU-2026:21664-1)
vulnerability in SUSE-SU-2026:21664-1 (SUSE-SU-2026:21664-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21692-1 Vulnerability in SUSE-SU-2026:21692-1 (SUSE-SU-2026:21692-1)
vulnerability in SUSE-SU-2026:21692-1 (SUSE-SU-2026:21692-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21667-1 Vulnerability in SUSE-SU-2026:21667-1 (SUSE-SU-2026:21667-1)
vulnerability in SUSE-SU-2026:21667-1 (SUSE-SU-2026:21667-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21716-1 Vulnerability in SUSE-SU-2026:21716-1 (SUSE-SU-2026:21716-1)
vulnerability in SUSE-SU-2026:21716-1 (SUSE-SU-2026:21716-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21659-1 Vulnerability in SUSE-SU-2026:21659-1 (SUSE-SU-2026:21659-1)
vulnerability in SUSE-SU-2026:21659-1 (SUSE-SU-2026:21659-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21715-1 Vulnerability in SUSE-SU-2026:21715-1 (SUSE-SU-2026:21715-1)
vulnerability in SUSE-SU-2026:21715-1 (SUSE-SU-2026:21715-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21658-1 Vulnerability in SUSE-SU-2026:21658-1 (SUSE-SU-2026:21658-1)
vulnerability in SUSE-SU-2026:21658-1 (SUSE-SU-2026:21658-1). Risk of unauthorized operations or information disclosure.
ROOT-APP-NPM-CVE-2026-26996 Vulnerability in @rootio/minimatch (ROOT-APP-NPM-CVE-2026-26996)
vulnerability in @rootio/minimatch (ROOT-APP-NPM-CVE-2026-26996). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.0.5-root.io.1, 10.1.1-root.io.1, 9.0.3-root.io.1, 3.1.2-root.io.1, 9.0.4-root.io.1, 10.0.3-root.io.1, 10.0.1-root.io.1, 9.0.0-root.io.1, 9.0.5-root.io.2, 3.1.2-root.io.2, 9.0.5-root.io.3, 5.1.6-root.io.1, 10.0.3-root.io.2, 3.1.2-root.io.3, 10.0.1-root.io.2, 5.1.6-root.io.2, 9.0.3-root.io.2, 5.1.6-root.io.3, 10.0.1-root.io.3, 9.0.3-root.io.3, 10.0.3-root.io.3, 10.1.2-root.io.2, 10.1.2-root.io.3, 9.0.0-root.io.2, 9.0.0-root.io.3, 9.0.4-root.io.2, 10.1.1-root.io.3, 10.1.2-root.io.4, 3.0.5-root.io.2, 3.0.8-root.io.2, 9.0.0-root.io.4, 3.1.2-root.io.4, 9.0.4-root.io.3, 10.0.1-root.io.4, 8.0.4-root.io.1, 8.0.4-root.io.2, 9.0.5-root.io.4, 10.1.1-root.io.2, 10.0.3-root.io.4, 3.0.5-root.io.1, 9.0.3-root.io.4, 3.0.8-root.io.1, 3.0.4-root.io.1, 8.0.4-root.io.3, 5.1.6-root.io.4` or later.
CVE-2026-6670 Path Traversal in wordpress (CVE-2026-6670)
path traversal in wordpress (CVE-2026-6670). Confidential information can be exposed externally.
CVE-2026-6510 Vulnerability in wordpress (CVE-2026-6510)
vulnerability in wordpress (CVE-2026-6510). Successful exploitation can lead to full system takeover.
CVE-2026-6506 Vulnerability in wordpress (CVE-2026-6506)
vulnerability in wordpress (CVE-2026-6506). Successful exploitation can lead to full system takeover.
CVE-2026-6271 Unrestricted File Upload in wordpress (CVE-2026-6271)
vulnerability in wordpress (CVE-2026-6271). Successful exploitation can lead to full system takeover.
CVE-2026-6252 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6252)
cross-site scripting in wordpress (CVE-2026-6252). Risk of unauthorized operations or information disclosure.
CVE-2026-6225 SQL Injection in wordpress (CVE-2026-6225)
SQL injection in wordpress (CVE-2026-6225). Confidential information can be exposed externally.
CVE-2026-5395 Vulnerability in wordpress (CVE-2026-5395)
vulnerability in wordpress (CVE-2026-5395). Confidential information can be exposed externally.
CVE-2026-5365 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-5365)
vulnerability in wordpress (CVE-2026-5365). Risk of unauthorized operations or information disclosure.
CVE-2026-5193 Privilege Escalation in wordpress (CVE-2026-5193)
vulnerability in wordpress (CVE-2026-5193). Data can be tampered with by attackers.
CVE-2026-3892 Vulnerability in wordpress (CVE-2026-3892)
vulnerability in wordpress (CVE-2026-3892). Data can be tampered with by attackers.
CVE-2026-3718 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3718)
cross-site scripting in wordpress (CVE-2026-3718). Risk of unauthorized operations or information disclosure.
CVE-2026-3694 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3694)
cross-site scripting in wordpress (CVE-2026-3694). Risk of unauthorized operations or information disclosure.
ROOT-APP-PYPI-CVE-2026-28802 Vulnerability in rootio-Authlib (ROOT-APP-PYPI-CVE-2026-28802)
vulnerability in rootio-Authlib (ROOT-APP-PYPI-CVE-2026-28802). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.6.5+root.io.2, 1.6.5+root.io.3, 1.6.5+root.io.4, 1.6.5+root.io.5, 1.6.6+root.io.1, 1.6.6+root.io.2, 1.6.6+root.io.3, 1.6.6+root.io.4, 1.6.6+root.io.5, 1.6.5+root.io.6, 1.6.6+root.io.6, 1.6.6+root.io.7` or later.
ROOT-APP-PYPI-CVE-2026-28498 Vulnerability in rootio-Authlib (ROOT-APP-PYPI-CVE-2026-28498)
vulnerability in rootio-Authlib (ROOT-APP-PYPI-CVE-2026-28498). Data can be tampered with by attackers. Mitigation: upgrade to `0.15.5+root.io.5, 1.6.0+root.io.3, 1.6.3+root.io.4, 1.6.5+root.io.3, 1.6.1+root.io.3, 0.15.5+root.io.6, 1.6.0+root.io.4, 1.6.3+root.io.5, 1.6.5+root.io.4, 1.6.1+root.io.4, 0.15.5+root.io.7, 0.15.5+root.io.8, 1.6.5+root.io.5, 1.6.1+root.io.5, 1.6.6+root.io.1, 1.6.6+root.io.2, 1.6.6+root.io.3, 1.6.6+root.io.4, 0.15.5+root.io.9, 1.6.3+root.io.6, 1.6.6+root.io.5, 1.6.0+root.io.5, 1.6.1+root.io.6, 1.6.5+root.io.6, 1.6.6+root.io.6, 1.6.6+root.io.7` or later.
ROOT-APP-PYPI-CVE-2026-28490 Vulnerability in rootio-Authlib (ROOT-APP-PYPI-CVE-2026-28490)
vulnerability in rootio-Authlib (ROOT-APP-PYPI-CVE-2026-28490). Confidential information can be exposed externally. Mitigation: upgrade to `0.15.5+root.io.6, 0.15.5+root.io.7, 0.15.5+root.io.8, 1.6.6+root.io.3, 1.6.6+root.io.4, 0.15.5+root.io.9, 1.6.6+root.io.5, 1.6.6+root.io.6, 1.6.6+root.io.7` or later.
ROOT-APP-PYPI-CVE-2026-27962 Vulnerability in rootio-Authlib (ROOT-APP-PYPI-CVE-2026-27962)
vulnerability in rootio-Authlib (ROOT-APP-PYPI-CVE-2026-27962). Confidential information can be exposed externally. Mitigation: upgrade to `1.6.0+root.io.2, 1.6.5+root.io.1, 1.6.3+root.io.3, 0.15.5+root.io.4, 0.15.5+root.io.5, 1.6.5+root.io.2, 1.6.1+root.io.2, 1.6.0+root.io.3, 1.6.3+root.io.4, 1.6.5+root.io.3, 1.6.1+root.io.3, 0.15.5+root.io.6, 1.6.0+root.io.4, 1.6.3+root.io.5, 1.6.5+root.io.4, 1.6.1+root.io.4, 0.15.5+root.io.7, 0.15.5+root.io.8, 1.6.5+root.io.5, 1.6.1+root.io.5, 1.6.6+root.io.1, 1.6.6+root.io.2, 1.6.6+root.io.3, 1.6.6+root.io.4, 0.15.5+root.io.9, 1.6.3+root.io.6, 1.6.6+root.io.5, 1.6.0+root.io.5, 1.6.1+root.io.6, 1.6.5+root.io.6, 1.6.6+root.io.6, 1.6.6+root.io.7` or later.
ROOT-APP-GOBINARY-CVE-2025-32445 Vulnerability in rootio-github.com/argoproj/argo-events (ROOT-APP-GOBINARY-CVE-2025-32445)
vulnerability in rootio-github.com/argoproj/argo-events (ROOT-APP-GOBINARY-CVE-2025-32445). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v1.9.1-root.io.1, v1.9.1-root.io.2` or later.
ROOT-APP-GOBINARY-CVE-2025-29786 Vulnerability in rootio-github.com/expr-lang/expr (ROOT-APP-GOBINARY-CVE-2025-29786)
vulnerability in rootio-github.com/expr-lang/expr (ROOT-APP-GOBINARY-CVE-2025-29786). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v1.16.9-root.io.1, v1.16.9-root.io.2` or later.
ROOT-APP-GOBINARY-CVE-2025-68156 Vulnerability in rootio-github.com/expr-lang/expr (ROOT-APP-GOBINARY-CVE-2025-68156)
vulnerability in rootio-github.com/expr-lang/expr (ROOT-APP-GOBINARY-CVE-2025-68156). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v1.16.9-root.io.1, v1.16.9-root.io.2` or later.
CVE-2026-8280 Vulnerability in gitlab (CVE-2026-8280)
vulnerability in gitlab (CVE-2026-8280). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.9.7, 18.10.6, 18.11.3` or later.
CVE-2026-8181 Authentication Bypass in wordpress (CVE-2026-8181)
authentication bypass in wordpress (CVE-2026-8181). Successful exploitation can lead to full system takeover. Exploitable via `Authorization header`.
CVE-2026-6883 Vulnerability in gitlab (CVE-2026-6883)
vulnerability in gitlab (CVE-2026-6883). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.9.7, 18.10.6, 18.11.3` or later.
CVE-2026-7471 SSRF (Server-Side Request Forgery) in gitlab (CVE-2026-7471)
SSRF in gitlab (CVE-2026-7471). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.9.7, 18.10.6, 18.11.3` or later.
CVE-2026-8144 Vulnerability in gitlab (CVE-2026-8144)
vulnerability in gitlab (CVE-2026-8144). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.9.7, 18.10.6, 18.11.3` or later.
CVE-2026-6335 Cross-Site Scripting (XSS) in gitlab (CVE-2026-6335)
cross-site scripting in gitlab (CVE-2026-6335). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.11.3` or later.
CVE-2026-7377 Cross-Site Scripting (XSS) in gitlab (CVE-2026-7377)
cross-site scripting in gitlab (CVE-2026-7377). Confidential information can be exposed externally. Mitigation: upgrade to `18.9.7, 18.10.6, 18.11.3` or later.
CVE-2026-7481 Cross-Site Scripting (XSS) in gitlab (CVE-2026-7481)
cross-site scripting in gitlab (CVE-2026-7481). Confidential information can be exposed externally. Mitigation: upgrade to `18.9.7, 18.10.6, 18.11.3` or later.
CVE-2026-3607 Vulnerability in gitlab (CVE-2026-3607)
vulnerability in gitlab (CVE-2026-3607). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.9.7, 18.10.6, 18.11.3` or later.
CVE-2026-6073 Cross-Site Scripting (XSS) in gitlab (CVE-2026-6073)
cross-site scripting in gitlab (CVE-2026-6073). Confidential information can be exposed externally. Mitigation: upgrade to `18.9.7, 18.10.6, 18.11.3` or later.
CVE-2026-3829 Vulnerability in wordpress (CVE-2026-3829)
vulnerability in wordpress (CVE-2026-3829). Risk of unauthorized operations or information disclosure.
CVE-2026-3073 Vulnerability in gitlab (CVE-2026-3073)
vulnerability in gitlab (CVE-2026-3073). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.9.7, 18.10.6, 18.11.3` or later.
CVE-2026-3160 Vulnerability in gitlab (CVE-2026-3160)
vulnerability in gitlab (CVE-2026-3160). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.9.7, 18.10.6, 18.11.3` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →